• Open Menu Close Menu
  • Apple
  • Shopping Bag
  • Apple
  • Mac
  • iPad
  • iPhone
  • Watch
  • TV
  • Music
  • Support
  • Search apple.com
  • Shopping Bag

Lists

Open Menu Close Menu
  • Terms and Conditions
  • Lists hosted on this site
  • Email the Postmaster
  • Tips for posting to public mailing lists
Re: SPNEGO bug in CFNetwork
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: SPNEGO bug in CFNetwork

  • Subject: Re: SPNEGO bug in CFNetwork
  • From: Simon Spero <email@hidden>
  • Date: Mon, 13 Jun 2005 19:17:07 -0400
Becky Willrich wrote:
I looked at the bug - looks like the spec sez that string should be  case-insensitive.  Where precisely is this failing?  That is, what  server is requiring precisely the uppercase string?
Becky -

Kerberos 5 principal names are normally case sensitive.  Just about every other server principal  uses a lower case service name; SPNEGO is the odd one out.  In fact the earliest versions of the SPNEGO drafts did specify http/<hostname>; however this was broken in later drafts, and in deployed code.

Simple explanation of the normal convention in the java docs here: http://java.sun.com/j2se/1.5.0/docs/guide/security/jgss/tutorials/KerberosReq.html

SPNEGO 'spec' : http://msdn.microsoft.com/library/default.asp?url="">
<<
[....]
  1. Create the SPNs associated with this account on the KDC: 
    setspn—A host/mysrvr.proseware.com mysrvr
setspn—A HTTP/mysrvr.proseware.com mysrvr
    Note   Use upper-case "HTTP" to match the way Internet Explorer builds SPNs. Alternatively, you can run ktpass (as shown below) to create the SPNs. When using the "-princ" option of ktpass, you are specifying the Kerberos
>>

Kitten hasn't changed this, because it would break the installed base.
 _______________________________________________
Do not post admin requests to the list. They will be ignored.
Macnetworkprog mailing list      (email@hidden)
Help/Unsubscribe/Update your Subscription:

This email sent to email@hidden
References: 
 >SPNEGO bug in CFNetwork (From: Simon Spero <email@hidden>)
 >Re: SPNEGO bug in CFNetwork (From: Becky Willrich <email@hidden>)

  • Prev by Date: Re: SPNEGO bug in CFNetwork
  • Next by Date: AW: SCNetworkConnectionStart() Function for MAC OS Version <= 10_2
  • Previous by thread: Re: SPNEGO bug in CFNetwork
  • Next by thread: AW: SCNetworkConnectionStart() Function for MAC OS Version <= 10_2
  • Index(es):
    • Date
    • Thread